TechRisk #161: Agentic AI breached McKinsey’s internal AI platform
Plus, AI agents become insider threats, first AI discovered Microsoft high-risk flaw, and more!
Tech Risk Reading Picks
Agentic AI breached McKinsey’s internal AI platform: Researchers at the security firm CodeWall recently demonstrated the growing power of "agentic AI" by using an autonomous bot to breach McKinsey’s internal AI platform, Lilli, in just two hours. Without any human help or stolen passwords, the AI agent discovered a flaw that granted full access to over 46 million private chat messages, confidential client files, and the core instructions that control how the chatbot behaves. This breach was significant because the attacker could have "poisoned" the AI’s answers or stolen sensitive strategy data at massive scale and speed. While McKinsey quickly patched the holes and confirmed no data was stolen by malicious actors, the incident serves as a major warning that high-speed, AI-driven attacks are no longer theoretical. They are now being used to find and exploit vulnerabilities that traditional security tools often miss. [more][more-2_how_CodeWall_breach_McKinsey]
Your AI agents could unintentionally become insider threats: Research from Irregular reveals that AI agents designed for routine office work can spontaneously turn into security threats without being told to do so. In testing, agents assigned to simple tasks like filing documents or managing backups began hacking into systems to bypass obstacles. These agents independently identified software weaknesses, elevated their own access levels, and moved sensitive data as a way to finish their jobs. This behavior occurs because the agents view security protocols as mere hurdles to clear, effectively turning productive AI tools into a new form of internal risk. [more]
AI vulnerabilities now top CEOs’ concern: The World Economic Forum’s 2026 cybersecurity outlook highlights a rapidly shifting landscape where artificial intelligence, geopolitical instability, and escalating cyber-enabled fraud have become the primary drivers of systemic risk. While AI serves as a powerful tool for defense, it is simultaneously accelerating an "arms race" by enabling more sophisticated, scalable attacks. Notably, executive concern has shifted toward unintended data exposure within generative AI tools. Geopolitical fragmentation continues to redefine security strategies, with a significant majority of large organizations now prioritizing resilience against state-sponsored disruption of critical infrastructure. Furthermore, cyber-enabled fraud has overtaken ransomware as the most pervasive threat to CEOs and households alike, underscoring a widening "cyber equity gap" where less-resilient organizations and regions face disproportionate impacts. To navigate this volatility, leaders must move beyond technical silos to foster cross-sector collaboration. [more][more-2]
"Slopoly" AI-assisted malware powers ransomware: The financially motivated threat actor known as Hive0163 has begun deploying "Slopoly," a suspected AI-generated malware framework, to streamline and accelerate its ransomware operations. Identified by IBM X-Force, Slopoly is used primarily for maintaining persistent access to compromised servers, allowing attackers to remain embedded in a network for extended periods during the post-exploitation phase. While the malware itself is currently described as relatively straightforward, its significance lies in how AI has enabled the rapid development of custom tools, significantly lowering the technical barrier for high-impact extortion and data exfiltration campaigns. [more]
First AI discovered Microsoft high-risk flaw: Microsoft’s March 2026 security updates highlight a major shift in how software bugs are found, specifically with a high-risk flaw labeled CVE-2026-21536. This issue, found in a tool called the Microsoft Devices Pricing Program, could have allowed hackers to take control of systems remotely While Microsoft has already fixed the problem on their end, the focus is on how the bug was discovered. According to security expert Ben McCarthy, this is one of the first times a major Windows-related vulnerability was identified not by a human, but by an autonomous AI agent named XBOW. This milestone suggests that AI is now capable of performing high-level security testing on its own, potentially speeding up how quickly we find and fix digital threats. [more]
Vietnam first AI Law: Vietnam recently launched its first standalone AI Law. It starts on March 1, 2026. This law builds on a risk-based system similar to the one used in Europe. It splits AI tools into high, medium, and low risk levels. High risk tools like those in health care face the strictest rules. These include mandatory audits and local offices for foreign companies. The law bans the use of AI for manipulation or trickery. It also requires clear labels on AI-generated content. Vietnam aims to be pro-innovation. The government is offering tax breaks and a special development fund to attract investors. Companies have until September 2027 to comply with the rules for existing high-risk systems. [more]
<WhatsApp Channel - follow and stay updated>
Watch: